Fixed scope. Fixed fee. Written before you pay.
Every engagement is a fixed fee or a monthly retainer, delivered by the principal. After a 20-minute scoping call you receive a one-page scope with one number on it, within two business days.
Start small. Go further only when it earns it.
AI & Cyber Readiness Assessment
Five-minute scored assessment across NYDFS §500, SOC 2, HIPAA, NIST AI RMF and NIST 800-53, with a ranked gap list.
5 minutesBoard AI Posture Report template
The six-section report structure a regulated firm can hand its board or audit committee.
DownloadAI Exposure Sprint
One AI system or agent. Threat model, adversarial test, executive brief, 90-day roadmap.
2 weeksNYDFS §500 Gap & Certification Review
Controls gap, AI coverage in your risk assessment, certification-readiness memo.
2–3 weeksCMMC L2 Defensibility Review
Evidence sampling across the 110 controls, SPRS score substantiation, risk memo for counsel.
2–3 weeksAI Governance Baseline
NIST AI RMF and ISO/IEC 42001 readiness, policy stack, board memo.
6–8 weeksAdversarial AI Assessment
Multi-system and agentic: agents, RAG, MCP attack paths, social-engineering routes, retest.
4–6 weeks + retestFractional CISO
Advisory, Program or Executive cadence. Board reporting, exam and audit lead.
MonthlyA one-page written scope and fixed fee within two business days of the scoping call. Nothing is billed beyond it without your written approval.
One Adversarial AI Assessment runs at a time. If the queue is full, you'll know the start date before you sign.
Monthly, with a stated allocation of hours. No auto-renewal without written notice.
Get a straight answer in 20 minutes.
Tell us your trigger: an examiner, a board question, a customer questionnaire, an AI rollout, or a DoD contract. You'll leave the call with a recommended scope, and a written proposal follows within two business days.